Appendix 
Solving  MILP 

Finding  a  solution  to  the  MILP  expressed  by  Fig.  3  and  Fig.  5 
is  challenging  because  (i)  the  number  of  variables  and  constraints  is 
large  and  (ii)  BIG  is  much  larger  than  the  other  constants  causing 
numerical  issues.  Therefore,  we  will  rewrite  the  MILP  to  avoid  nu¬ 
merical  issues.  We  will  also  present  different  methods  for  solving  the 
MILP;  they  differ  in  (i)  the  amount  of  time  to  finish  and  (ii)  whether 
a  solution  is  guaranteed  to  be  found  if  a  solution  exists.  They  all  have 
in  common,  however,  that  they  return  a  tuple  (flag,  o)  such  that  if 
flag  is  true,  then  the  MILP  is  feasible. 

It  can  be  seen  in  Fig.  5,  that  changing  the  domain  of 
mbi,j,g,6  from  non-negative  integer  to  non-negative  real 
does  not  change  the  feasiblity  of  the  MILP.  The  same 
applies  to  mmbi.j'j'y.i,  mmboij,9,&,  oat  i,j,g,b,  oao;,9,9l6. 

We  will  now  rewrite  the  constraints.  Let 
SCALINGFACTORNACCESSES  be  an  integer  that  we 
choose  (e.g.  SCALINGFACTORNACCESSES  =  223). 

Let  BUSCLOCKFREQ  denote  the  clock  frequency  of  the 
bus  (e.g.  BUSCLOCKFREQ  =  1.5  x  109).  Then  we  can 
introduce  coat;  g  b  =  coat i,j}9,b  x  BUSCLOCKFREQ  and 
then  replace  coat i,j,g,b  with  coat i:j:9yb-  Then  we  can  introduce 

mb-^g>6  =  mbi,j, ^/SCALINGFACTORNACCESSES 

and  then  replace  mbjj,9i(,  with  mb,  ,  g  fj .  By  choosing 
SCALINGFACTORNACCESSES  properly,  ’  we  obtain  that 
the  variables  are  in  reasonably  small  range  (e.g.  six  orders  of 
magnitude)  and  this  avoids  numerical  issues.  For  convenience, 
we  also  rename  coat i  j  g  b  and  coat and  rename  mb,  ,  ,,  ;, 
as  mbil9l9ij,.  This  leaves  us  with  discussion  on  how  to  choose 
SCALINGFACTORNACCESSES.  We  do  it  as  follows. 

1)  SCALINGFACTORNACCESSES  :=  1 

2)  if  (69)  >  0  then 

3)  SCALINGFACTORNACCESSES  :=  smallest  number  > 

4)  (70)/(71)  such  that  it  is  equal  to  two  raised  to  some  integer. 

5)  end  if 

We  will  now  present  the  methods. 

Method  1 

Method  1  is  guaranteed  to  output  a  solution  if  a  solution  exists. 
Method  1  is  to  simply  take  the  constraints  in  Fig.  3  and  Fig.  5  and 
solve  the  MILP.  If  there  exists  an  assignment  of  values  to  the  variables 
so  that  the  constraints  in  Fig.  3  and  Fig.  5  are  satisfied  then  flag  is 
true  and  o  is  the  values  of  the  o-variables;  otherwise  flag  is  false  and 
o  is  undefined. 

Method  2 

Method  2  is  guaranteed  to  output  a  solution  if  a  solution  exists. 
We  can  reason  as  follows:  If  there  is  a  feasible  solution,  then  it  holds 
that  for  each  cache  color,  the  pages  that  are  mapped  to  frames  of 
this  cache  color  all  belong  to  the  same  task  (otherwise  (46)  would  be 
violated).  Let  occupiescachecolor;  h  be  I  if  task  n  occupies  cache 
color  h;  otherwise  0.  If,  for  this  solution,  it  holds  that  there  is  a 
task  r;  and  a  task  r,/  and  a  cache  color  h  and  a  cache  color  h! 
such  that  i  <  i'  and  h  >  h!  and  occupiescachecolorj  h  =  1  and 
occupiescachecolor^  h,  =  1.  then  we  can  change  the  o-values  of 
the  solution  so  that  each  page  of  n  that  was  mapped  to  h  is  mapped 
to  h1  and  each  page  of  t[  that  was  mapped  to  h!  is  mapped  to  h. 
Also  update  the  ^-values  accordingly.  This  gives  us  a  new  feasible 
solution  such  that  i  <i!  and  h  <  h'  and  occupiescachecolor;  h  =  1 
and  occupiescachecolor;,  h,  =  1.  Repeating  this  argument  yields 
that  for  each  task  n,  tasks  with  lower  index  than  n  only  occupies 
cache  colors  of  lower  index  and  tasks  with  higher  index  than  r;  only 


occupies  cache  colors  of  higher  index.  If  there  is  a  cache  color  h 
that  is  not  occupied  by  any  task,  then  we  can  identify  all  tasks  that 
occupies  cache  colors  of  index  greater  than  h  and  let  each  of  their 
memory  allocation  use  a  cache  color  that  has  index  1  less.  Also  update 
the  x-values  accordingly. 

For  this  reason,  we  can,  without  loss  of  generality,  add  the 
following  constraint: 

V(T,  j' ,  g' ,  h' ,  i" ,  j" ,  g" ,  h")  s.  t.  (r,/  E  r)  A  (j'  E  [1,  nstages,/])A 
( g '  £  [1,  nseg,/^/])  A  (h!  E  [0,  H  —  1])  A  (r,//  £  r)  A  (j"  E  [1,  nstages,//])A 

( g "  e  [1,  nseg A  ( h "  E  [0,  H  -  1])A 
(*'  <  i")  A  (h!  >  h")  :  xit  y  y  y  +  x.tn  y,  yt  y,  <  1 

Method  2  is  like  Method  1  but  with  the  constraint  above. 

Method  3 

Method  3  is  not  guaranteed  to  output  a  solution  if  a  solution 
exists.  Method  3  is  defined  as  follows. 

1)  Let  the  following  variables  be  non-negative  real  num¬ 
bers:  loadfactorofcells,  utilconsideringcont,  loadofdeadlinei, 
myobj 

2)  Let  utilconsideringcont,  loadofdeadlinei  be  defined  as 
follows:  utilconsideringcont  =  (XX  ,er  “r“)/(m  x  s) 

and  loadofdeadlinei  =  (XX  ,  gT  max(LPiT  P''  J  +1,0)  x 
cui')/(m  x  s  x  Di). 

3)  Solve  the  following  problem:  minimize  myobj  subject  to  the 
constraints  in  Fig.  5  and 

W(h,  b )  s.  t.  (h  €  [0,  H  -  1])  A  (6  <E  [0,  B  -  1])  : 

(XXj  E  —  XX  E  [l,nstageSj]  £9e  [l.nsegjj]  X/pElO.np, j  —  1] 

(Gg  -  x  Oiyjtg,pth,b))  <  CAP  x  loadfactorofcells  and 

loadfactorofcells  <  myobj  and  utilconsideringcont  < 
myobj  and  Wi  £  r  :  loadofdeadlinei  <  myobj. 

4)  Consider  the  optimization  problem  of  fmem(r,  II,  K)  where  the 
o-values  must  be  equal  to  the  values  obtained  in  step  3  above. 
Solve  this  optimization  problem. 

5)  If  the  optimization  problem  in  step  4  is  feasible  then  return 
(true,  o)  where  o  is  the  o-values  obtained  in  step  3  above. 

6)  If  the  optimization  problem  in  step  4  is  infeasible  then  return 
(false,  o)  where  o  is  undefined. 

When  solving  the  first  optimization  problem,  if  an  optimal  solution 
has  not  been  bound  after  3600  seconds,  then  we  terminate  and  deliver 
the  best  result  (non-optimal  result)  so  far. 

Evaluation 

In  this  section,  we  address  the  following  questions:  (i)  how  long 
time  does  it  take  to  perform  the  schedulability  test  (solve  the  MILP), 
(ii)  how  pessimistic  is  our  schedulability  test  and  (iii)  how  does  the 
guarantee  of  our  schedulability  test  compare  to  the  actual  behavior  in 
practice  (the  execution  of  a  program  on  a  real  computer). 

Consider  the  system  in  Fig.  6.  It  models  a  hypothetical  au¬ 
tonomous  system  with  4  processors  and  task  n  performing  sensor 
fusion  (it  first  reads  the  sensors  in  its  1st  stage  and  then  performs 
parallel  processing  in  its  2nd  stage  and  then  merges  the  results  in 
its  3rd  stage)  and  task  T2  is  a  mission  controller  task  (it  takes  high- 
level  decisions  about  the  mission,  e.g,  whether  the  mission  should 
be  aborted)  and  task  T3  recomputes  the  current  plans  when  a  certain 
critical  event  occurs  (its  2nd  stage  performs  computations  in  parallel). 

Table  II  shows  the  outcome  of  our  evaluation.  Each  row  shows 
one  system  and  its  corresponding  outcome.  The  first  column  shows 
the  value  of  Ci,2.  The  second  column  shows  the  number  of  memory 
accesses  to  a  page  relative  to  the  number  of  memory  accesses  stated 
in  Fig.  6.  If  the  value  in  the  column  is  1  then  the  number  of  memory 
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^1,2 

(seconds) 

multi 

Time 

(seconds) 
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0.005000 

0.000000 

358.880339 

1 
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0 

0.010000 

0.000000 

357.445275 

1 
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0 
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0 
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0 

0.020000 
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0 

0.025000 
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1 

TABLE  II:  Results  from  evaluation  (m  =  4). 


accesess  to  a  page  is  equal  to  the  number  of  memory  accesses 
stated  in  Fig.  6.  The  third  column  indicates  the  amount  of  time  it 
takes  to  perform  the  schedulability  analysis  (with  the  MILP).  The 
fourth  column  indicates  whether  that  schedulability  analysis  provides 
a  guarantee  that  the  taskset  is  schedulable. 
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17  =  100 

210 


1,1,0, 1,2, 1, 0),(1, 1,1,  0,1,  2,1, 0),  (1,1, 1,2, 1,2,3, 0),  (1,1, 1,3, 1,2,4, 0),  (1,3, 

,  2,  4, 1),  (3, 1, 1,  0,  3,  2, 1,  0>,  (3, 1, 1, 1,  3,  2,  2,  0),  (3,  3, 1,  0,  3,  2, 1, 1>,  (3,  3, 1, 1,  3, 2 
5  X  109),trrd  =  4,tfaw  =  20, wl  =  7,bl  =  8,twtr  =  5, cl  =  9,trp  =  9,trcd  =  9,twr  = 


1.0, 1,2, 1,1), (1,3, 1,1. 1,2, 2.1), 

,2,1)} 

=  10 


Fig.  6:  One  of  the  systems  used  in  our  evaluation. 
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